CVE-2017-12547 : A local arbitrary command execution vulnerability in HPE System Management Homepage for Windows and Linux version prior

A local arbitrary command execution vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found.

Published 2018-02-15 22:29:05

Updated 2019-10-03 00:03:26

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2017-12547

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 8 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2017-12547

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.5	MEDIUM	AV:L/AC:H/Au:S/C:N/I:C/A:C	1.5	9.2	NIST
Access Vector: Local Access Complexity: High Authentication: Single Confidentiality Impact: None Integrity Impact: Complete Availability Impact: Complete
5.6	MEDIUM	CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:H	0.3	5.2	NIST
Attack Vector: Local Attack Complexity: High Privileges Required: High User Interaction: Required Scope: Unchanged Confidentiality: None Integrity: High Availability: High

References for CVE-2017-12547

Products affected by CVE-2017-12547